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Abstract 

We  investigated  a  hierarchical  hybrid  system  architecture  to  implement  an  autonomous  multiple  satellite 
control  scheme  for  the  low  earth  orbit  remote  sensing  satellites.  We  networked  multiple  satellites  and 
ground  control  station  into  a  hierarchical  hybrid  system  and  applied  hybrid  automata  theory  onto  the 
different  tiers  of  the  system.  Compared  with  the  traditional  satellite  control  concept,  the  hierarchical 
hybrid  system  is  more  autonomous,  effective,  scalable,  and  robust  for  the  space  remote  sensing 
applications.  In  this  report,  we  developed  the  mathematical  model  for  the  multiple  satellite  control  model 
and  simulated  the  model  with  Matlab,  Simulink  and  Stateflow.  The  simulation  results  show  that  the 
hierarchical  hybrid  system  theory  is  feasible  for  the  autonomous  control  of  multiple  satellite. 


1.  Introduction 

Using  multiple  small  and  low-cost  satellite  to  perform  a  mission  instead  of  a  large  satellite  has  a  number 
of  advantages.  Small  satellites  are  more  cost-effective  to  build  and  launch — they  can  piggyback  on  large 
payload  launch.  Adding  more  small  satellites  to  the  system  is  easier  from  development  time  and 
economic  perspective.  The  system  would  be  more  robust,  because  even  if  a  small  satellite  fails,  the 
mission  would  still  go  on  with  rest  of  the  satellites.  All  of  these  properties  are  predicated,  however,  on  the 
fact  that  autonomous  control  of  multiple  satellites  is  possible.  Controlling  a  large  number  of  satellites 
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from  a  ground  control  station  would  require  many  resources.  Moreover,  autonomous  multiple  satellite 
system  would  react  in  a  more  time-effective  manner.  Therefore,  we  study  the  control  paradigm  necessary 
to  autonomous  control  multiple  satellites. 

Although  the  developed  method  is  not  necessarily  restricted  the  remote  sensing  application,  in  this 
report,  we  will  concentrate  on  the  remote  sensing  applications  with  low-earth-orbit  (LEO)  satellites.  The 
remote  sensing  applications  include  environmental  monitoring,  natural  disaster  detecting,  and  battlefield 
surveillance.  Therefore,  how  to  acquire  information  from  the  target  area  more  timely,  more  accurately, 
more  effectively  with  less  cost  are  important  issues  when  we  design  a  LEO  satellite  remote  sensing 
system. 

In  the  traditional  LEO  satellite  based  remote  sensing  applications,  satellites  are  controlled  by  the 
ground  control  stations.  The  satellites  receive  the  mission  commands  from  ground  control  station  when 
they  are  visible  from  the  ground  control  station,  they  execute  the  mission.  After  performing  the  mission, 
the  data  acquired  by  the  satellites  will  be  sent  to  the  ground  control  station  in  the  subsequent  pass.  The 
traditional  control  of  the  satellites  is  implemented  via  communication  links  between  ground  control 
station  and  the  satellites.  There  are  several  communication  architectures,  which  are  described  in  [1], 
dealing  with  the  ground  control  station  and  satellites  such  as  Store  and  Forward  architecture, 
Geostationary  Crosslink  Communication  system,  and  Low-Altitude  Multiple  Satellites  with  Crosslinks. 
All  of  these  traditional  space  system  architectures  have  some  disadvantages  when  they  are  applied  to  the 
low-cost  space  applications.  These  systems  are  designed  as  a  communication  link  rather  than  a  control 
and  communication  system  architecture.  It  is  important  to  include  communication  architecture,  however, 
that  is  not  the  only  consideration  when  designing  a  multiple  satellite  autonomous  control  system.  The 
control  architecture  is  also  important.  In  fact,  both  communication  and  control  architecture  have  to  be 
considered  to  design  an  effective  multi-satellite  control  system. 

In  this  report,  we  propose  a  hierarchical  hybrid  system  architecture  by  connecting  the  LEO  satellites 
into  a  network  to  meet  the  requirements  of  more  efficient  and  autonomous  real  time  remote  sensing 
missions.  Unlike  the  traditional  system  architectures  mentioned  above,  the  new  system  has  a  hierarchical 
architecture  for  the  networked  satellites.  Hierarchical  system  had  been  used  in  the  space  applications  [2], 
the  multiple  intelligent  robotics  control  [3],  and  unmanned  vehicles  control  [4,  5].  It  is  also  a  typical 
architecture  of  sensor  networks  [6].  Hybrid  automata  are  used  in  cooperative  control  of  a  group  of  aerial 
or  ground  objects  [7,  8]  and  autonomous  vehicles  formation  maneuvers  [9].  We  combine  the  hybrid 
control  theory  into  the  hierarchical  system  because  that  there  are  not  only  discrete  control  dynamics 
involved  in  the  satellite  system,  but  also  the  continuous  dynamics.  This  hierarchical  hybrid  architecture 
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has  several  advantages  in  performance,  autonomy,  cost,  scalability,  and  efficiency  compared  with  the 
tradition  system  architectures. 

1.1  System  Architecture 

Our  hierarchical  architecture  in  the  satellite  sensor  network  consists  of  three  tiers,  the  top  tier  is  the 
Ground  Control  Station,  the  middle  tier  component  is  called  the  Mother-ship,  and  the  bottom  tier  is  called 
the  Agent.  Figure  1  shows  this  hierarchical  architecture. 


Figure  1.  Hierarchical  Cooperative  Satellite  Control  System  Architecture 

The  main  goal  for  the  Ground  Control  Station  is  to  generate  the  mission  command,  monitor  the  status 
of  the  whole  satellite  network,  and  gather  data  which  is  obtained  from  the  networked  satellites.  The 
Ground  Control  Station  also  performs  the  ranging  and  tracking  tasks  for  the  satellites  passing  through  its 
communication  radius  to  ensure  the  control  accuracy  of  Mother-ships  and  Agents. 

A  Mother-ship  is  a  satellite  which  connects  the  Ground  Control  Station  and  Agents.  One  Mother-ship 
can  control  a  number  of  Agents  in  a  cluster,  within  its  communication  radius.  A  Mother-ship  receives 
mission  command  from  the  Ground  Control  Station,  then  analyzes  the  command,  calculates  the  orbit 
parameters  for  each  Agent,  then  generates  the  task  commands  to  coordinate  each  Agent.  Then  the 
Mother-ship  sends  these  coordination  information  to  Agents  at  the  scheduled  time  to  control  the  orbit  and 
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attitude  of  the  Agents  to  perform  the  tasks.  The  Mother-ship  then  monitors  the  feedback  from  Agents  to 
determine  whether  the  tasks  are  accomplished  and  whether  it  is  necessary  to  reschedule  the  tasks  for  the 
Agents  if  some  of  the  tasks  are  failed.  Typically,  a  Mother-ship  and  the  Agents  within  a  cluster  are  in  the 
same  orbit  in  such  a  way  that  the  Mother-ship  can  maintain  a  fixed  relative  position  to  its  Agents.  A 
Mother-ship  can  also  communicate  with  the  other  Mother-ships  to  relay  the  mission  command  from  the 
Ground  Control  Station  and  perform  the  coordinated  control  on  Agents.  When  all  Agents,  which  are 
controlled  by  a  certain  Mother-ship,  finish  the  tasks,  the  Mother-ship  will  feedback  the  mission  status  to 
the  Ground  Control  Station.  This  alerts  the  operator  whether  the  mission  is  accomplished,  partial 
accomplished,  or  failed.  Then  the  sensor  data  will  be  collected  by  the  Mother-ship  and  routed  to  the 
Ground  Control  Station  directly  or  by  multiple-hop  routing. 

An  Agent  is  a  satellite  with  sensors  and  actuators  which  performs  the  required  operations  for  the 
mission  specified  by  the  Ground  Control  Station.  The  Agents  are  grouped  into  different  clusters,  within 
each  cluster  there  is  one  Mother-ship  acting  as  the  cluster  head  which  can  control  all  Agents  in  this  group. 
The  Agents  perform  the  orbit  and  attitude  maneuver  according  to  the  task  commands  from  Mother-ship. 
After  performing  the  designated  task  operation,  the  Agent  will  send  a  feedback  message  and  the  sensed 
data  to  the  Mother-ship.  In  case  a  Mother-ship  malfunctions,  one  of  the  Agents  can  be  assigned  as  the 
new  Mother-ship  to  take  over  the  control  and  coordination  of  the  cluster.  The  metrics  for  selecting  a 
Mother-ship  from  Agents  depend  on  the  physical  characteristics  of  the  Agents  and  system  requirements. 

Both  the  Mother-ship  and  Agent  are  LEO  satellites.  The  difference  between  a  Mother-ship  and  an 
Agent  is  that  the  Mother-ship  has  more  computation  and  communication  capacity.  In  addition,  the 
Mother-ship  can  obtain  more  accurate  position  and  orientation  information  than  the  Agents.  However,  if  a 
Mother-ship  fails  and  an  Agent  takes  over  the  control  of  the  cluster,  then  there  is  no  performance 
difference  between  the  new  Mother-ship  and  other  Agents. 

Figure  2  shows  one  possible  configuration  of  the  satellite  sensor  network  where  there  are  one  Ground 
Control  Station  and  six  clusters  of  satellites.  Each  cluster  consists  of  one  Mother-ship  as  cluster  head  and 
two  Agents.  We  note  that  different  clusters  of  satellites  may  operate  in  the  different  LEO  orbits  whereas 
satellites  within  the  same  cluster  are  in  the  same  orbit. 


4 


Figure  2.  Satellite  network  system  configuration 

1.2  Communications  Architecture 

In  a  multiple  satellite  control  system,  communications  architecture  is  closely  related  to  the  control 
because  satellites  are  not  always  accessible  from  the  Ground  Control  Station.  Therefore,  the  control 
commands  and  coordination  information  are  disseminated  only  by  the  intercommunication  among  the 
satellites.  Therefore,  it  is  necessary  to  design  an  effective  architecture  to  transmit  the  control  command 
and  relay  the  data  in  the  system. 

Due  to  the  difference  among  the  functional  performances  of  the  components  in  different  tiers, 
communications  methods  used  in  satellite  network  vary  in  different  tiers. 

In  the  top  tier,  the  Ground  Control  Station  sends  the  mission  commands  to  all  reachable  Mother-ships. 
The  mission  commands  include  scheduling  missions  and  rescheduling  missions. 

In  the  middle  tier,  a  Mother-ship  which  receives  the  mission  command  from  the  Ground  Control 
Station  will  broadcast  the  command  to  other  reachable  Mother-ships.  The  sensed  data  collected  by  the 
Mother-ships  will  also  be  relayed  to  other  reachable  Mother-ships  until  the  data  reach  the  Ground  Control 
Station.  The  Mother-ship  sends  task  commands  to  different  Agents  by  the  unicasting  method. 
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In  the  bottom  tier,  all  Agents  within  the  cluster  can  only  communicate  with  their  cluster  head,  the 
Mother-ship.  The  Agents  receive  the  task  command  from  the  Mother-ship  and  send  the  sensed  data  back 
to  the  Mother-ship.  There  is  an  exception  to  this  rule;  if  Mother-ship  malfunctions  and  it  is  unable  to 
perform  the  mission,  then  Agents  in  the  cluster  will  communicate  with  each  other  to  elect  a  new  cluster 
head.  The  Agent  with  the  closest  performance  specification  in  terms  of  processing  speed,  orbit 
determination  accuracy,  and  attitude  determination  accuracy  will  replace  as  the  Mother-ship.  If  all  the 
Agents  have  similar  performance  specifications,  the  Agent  which  is  closest  in  the  orbit  will  replace  the 
failed  Mother-ship. 

2.  Hybrid  Automata  Theory 

The  mathematical  model  that  we  will  use  for  the  multiple  satellite  control  architecture  is  hybrid 
automata.  In  a  hybrid  system,  both  discrete  and  continuous  dynamics  exist,  and  this  can  be  modeled  using 
hybrid  automata.  Hybrid  automata  are  represented  using  the  graph  theory  as  a  state  transition  diagram. 
The  transitions  between  each  state  in  the  diagram  are  the  discrete  transitions,  while  the  continuous 
dynamics  are  included  in  each  state.  Certain  conditions  that  can  be  viewed  as  discrete  events  constitute 
the  transitions,  causing  the  system  to  move  from  one  state  to  another.  In  hybrid  automata  theory,  there  are 
several  important  definitions  and  properties  which  we  will  review  in  this  report.  We  will  state  the 
definitions  and  theorems  as  given  in  [11]  for  the  sake  of  completeness.  For  more  details  and  proofs  see 
[11,12,  13,14,15], 


•  Hybrid  Automaton: 


A  hybrid  automaton  H  can  be  described  mathematically  as, 


H  =  (Q,X,f  ,Init,D,E,G,R) 


where 

Q 

x 

f  -QxX  — »  TX 
Init  qQxX 
D-.Q -*  P{X) 
E  c  QxQ 
G  :  E  P(X) 


Finite  set  of  discrete  variables  representing  the  discrete  dynamics  of  H  ; 
Finite  set  of  continuous  variables; 

Vector  field,  defining  the  continuous  flow  in  each  discrete  node; 

Set  of  initial  states; 

Domain; 

Set  of  edges; 

Guard  condition; 
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R  :  ExX  — >  P(X)  Reset  map. 


The  set  Q  is  simply  the  set  of  discrete  states  where  the  system  is  allowed  to  exist.  The  set  X  will 
represent  all  of  the  continuous  variables  that  are  possible  in  each  of  the  states  of  Q.  The  vector  field,  f 
usually  consists  of  time  dependent  functions  such  as  differential  equations  that  describe  how  each  of  the 
variables  in  X changes  over  time.  TX  denotes  the  tangent  bundle  of  X.  The  initial  states  are  simply  the 
initial  values  of  the  continuous  variables  and  the  domain,  D,  contains  the  range  where  each  continuous 
variable  is  allowed  to  exist.  The  domain  is  also  called  the  invariant  set.  P(X)  denotes  the  set  of  all 
subsets  of  X .  The  set  of  edges,  E,  describe  what  transitions  are  allowed  to  occur  between  states.  The 
guard  conditions,  G,  describe  the  events  that  must  occur  for  a  transition  to  take  place.  Finally,  the  reset 
map,  R ,  is  the  set  of  conditions  that  cause  the  system  to  enter  its  initial  state. 

•  Hybrid  Time  Trajectory 

A  hybrid  time  trajectory  is  a  finite  or  infinite  sequence  of  intervals  r  =  {/,}^0 ,  such  that 

1)  for  all  z  <  TV; 

2)  if  N  <co,  then  either  IN  =  [^,1-'^]  or  IN  =  [r^r'^);  and 

3)  t.  <  r  \  =  rj+1  for  all  i . 

In  other  words,  a  hybrid  time  trajectory  is  a  sequence  of  intervals  of  the  real  line,  whose  end  points 
overlap.  The  interpretation  is  that  the  end  points  of  the  intervals  are  the  times  at  which  discrete  transitions 
take  place  [16].  We  will  use  hybrid  time  trajectory  to  analyze  time  horizon  of  executions  defined  below. 

•  Execution 

Like  a  solution  to  a  continuous  system,  an  execution  of  a  hybrid  automata  H  is  a  collection  %  =  (r,c/,x) , 
where  r  is  a  hybrid  time  trajectory,  q:(r)-^Q  is  a  map,  and  x  =  jx! :  z  e  (r)}  is  a  collection  of 
differentiable  maps  x‘ :  I,  -»  X  ,  such  that 

1)  (q° ,x°)  e  Init; 

2)  for  all  /  e [ r,, r ',) , x  (z)  =  / (q(i), x' (t))  andx‘  (t)  e  D{q{i))\ 

3)  for  all  ie(r)\{N},  e  =  (q(i),q(i +  \))  e  E,  x'(r',)  e  G(e),  and  x,+1(r/+,)  e  R(e,x 
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Here,  (r)is  the  set  {0,  1,  2,...,  N]  if  N  is  finite  and  {0,  1,  2,...}  if  N  =  oo .  In  this  report,  (?°,x°) 
denotes  the  initial  state,  we  use  £H(q°,x° )  to  denote  the  set  of  executions  with  the  initial  condition 
(q°,x°)  e  lnit ,  £„  to  denote  the  maximum  executions,  £’H  to  denote  all  the  finite  executions  and  f"  to 
denote  the  set  of  all  infinite  executions. 

•  Reachability 

Reachability  is  a  concept  of  hybrid  systems  which  specifies  that  the  certain  state  q  e  Q  can  be  reached  in 
the  hybrid  automaton  H  through  a  finite  number  of  executions.  The  reachability  of  a  hybrid  automaton 
can  be  expressed  in  the  following  equation: 

ReachH  =  {(q,x)  eQxX:  3({[r„T'i]}“0,q,x)  e  £’H,(q(N),xN (r'N))  =  (q,x)} . 

The  set  for  which  the  continuous  evaluation  is  impossible  can  be  expressed  as 
OutH  =  {( q,x )  e  Qx  X  :  Vs  >  0,3r  e  [0 ,s),y/(q,x,t)  <£  D(q)} , 

where  y/{q,x,t)  is  a  solution  of  x  =  f(q(i),x(t ))  for  x(0)  =  x°. 

•  Non-Blocking  and  Deterministic 

The  non-blocking  and  deterministic  properties  are  two  important  criteria  for  analyzing  the  existence 
and  uniqueness  of  the  executions  of  hybrid  automata.  The  non-blocking  property  implies  that  executions 
exist  for  all  initial  states  and  this  is  related  to  the  controllability  and  closure.  The  deterministic  property 
implies  that  the  infinite  executions  are  unique  [12]. 

A  hybrid  automaton  is  non-blocking  if  £%(q°,x°)  is  non-empty  for  all  (q°,x°)e  lnit .  The  following 
lemma  can  be  used  to  determine  the  non-blocking  property  of  a  hybrid  automaton. 

Lemma  I:  A  hybrid  automaton  H  is  non-blocking  if  for  all  (q,x)  e  ReachH  f]OutH,  there  exists  (q,q')  e  E 
so  that  x  e  G{q,  q ') . 

A  hybrid  automaton,  H,  is  called  deterministic  if  £^(q°,x°)  contains  at  most  one  element  for  all 
(q°  ,x°)  e  lnit .  Also,  there  is  a  lemma  to  examine  the  deterministic  property  of  H. 
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Lemma  II:  A  hybrid  automaton  H  is  deterministic  if  and  only  if  for  all  (q,  x)  e  Reach H , 

1)  if  x  e  G(q,q')  for  some  ( q,q ')  e  E,  then  ( q,x )  e  OutH\ 

2)  if  (q, q')eE  and  (q, q")eE  with  q'^q",  then  x  g  G{q, q ') fl G(q, q "); 

3)  if  {q,q')  6  E  and  x  e  G(q,qr),  then  R(q,q'x)  cotains  at  most  one  element. 

•  Existence  and  uniqueness: 

Now,  we  present  a  theorem  to  determine  the  existence  and  uniqueness  of  the  hybrid  automaton,  H. 

Theorem  I:  If  a  hybrid  automaton,  H,  satisfies  Lemma  I  and  Lemma  II  above,  then  H  accepts  a  unique 
infinite  execution  for  all  e  InitH . 

In  the  following  sections,  we  will  utilize  these  definitions  and  theorems  to  characterize  a  hybrid 
system. 
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3.  Hierarchical  Modeling  of  Multiple  Satellite  Control: 

3.1  Ground  Control  Station  (GCS)  Function  Definitions  and  Model: 

1)  Generate  and  send  commands  to  the  Mother-ships.  For  example,  Imaging  Command,  would 
includes  the  coordinates  of  the  area  to  be  imaged  and/or  operation  time  period. 

2)  If  the  status  feedback  from  a  Mother-ship  indicates  that  the  command  is  un-executable,  then  GCS 
will  re-generate  a  command  to  the  Mother-ships. 

3)  Track  the  orbital  status  of  all  Mother-ships  and  Agents  which  are  visible  to  the  GCS. 


Figure  3.  State  Transition  Diagram  for  Ground  Control  Station 

For  the  Ground  Control  Station  automaton,  there  are  three  discrete  states  q{ ,  q2,  and  q3 ,  therefore 
Q  =  {<h  q 2  }  -  Where 

•  qx  :  Operation  Node.  In  this  node,  GCS  generates  mission  commands  according  to  the 

requirement  or  the  operator’s  input,  then  sends  the  command  to  the  visible  Mother-ships  at  the 
specific  time.  After  sending  the  mission  command  to  the  Mother-ships,  the  system  will  jump 
from  <7,  to  q2 .  In  q2 ,  the  system  will  wait  for  the  Mother-ship  to  schedule  the  mission.  If  the 

mission  has  been  successfully  scheduled,  then  the  node  will  switch  back  from  q2  to  qx .  In  qt , 

the  node  will  check  the  Task#_Status_OK  tag  to  determine  whether  the  mission  is  accomplished 
or  failed.  The  “#”  will  be  the  mission  number.  If  Task#_Status_OK  =  1,  it  means  that  the 
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mission  was  accomplished  so  that  the  system  will  stay  in  node  qx  waiting  for  the  new  mission 
command.  The  Task#_Status_OK  =  0,  means  the  mission  number,  #,  failed  during  the  last 
operation.  The  operator  may  send  another  command  at  this  point.  In  qx ,  GCS  does  ranging  to 
the  visible  MSs  and  Agents  to  correct  error  in  the  navigation  information.  If  GCS  monitors  the 
navigation  error  of  the  satellites,  it  will  jump  to  q3  to  control  the  satellite  to  make  the  orbit 
maneuver. 

•  q2 :  Command  Schedule  Status  Check  Node.  In  this  node,  the  system  checks  the  mission 
schedule  status  from  the  Mother-ships.  If  at  least  one  Mother-ship  sends  back  scheduling  success 
message  then  the  Schedule#_Complete  tag  is  equal  to  1 ,  the  system  will  jump  back  to  qx  for  the 

new  command.  If  more  than  one  Mother-ships  send  back  the  command  executable  messages, 
then  the  Agent  with  the  earliest  possible  execution  time  will  execute  the  mission,  and  the  system 
will  jump  back  to  qx  with  the  tag  Schedule#_Complete  =  1 ,  which  means  that  the  command  has 

been  successfully  scheduled.  The  is  going  to  represent  the  command  number  so  that  there 
can  be  more  than  one  command. 

•  q3 :  Ranging  Correction  Node.  In  this  node,  GCS  detects  the  altitude  error  of  the  MS  or  Agent,  it 

sends  the  orbit  command  to  the  Mother-ships  to  control  the  Agents.  After  the  orbit  maneuver,  the 
system  will  jump  back  to  the  previous  node  where  it  transits  from. 

The  finite  set  defined  for  the  Ground  Control  Station  contains  only  one  continuous  variable  Xx-t, 
which  represents  the  system  time. 


x=W- 

The  Domains  of  Q-  {qx  q2  q3 }  are  given  as  follows, 

x  e  M1  :  [{xx  <  Command  _  Time)md(GCS  _  Command  =  0)] 
or  (Task #_  Status  OK  =  1) 

D(q2)  =  jx  e  R1  :  (x,  <  Max _ Operation __ Time)md(Schedule #_ Complete  =  0)}, 

D(q3 )  =  jx  e  JR1  :  (Ranging JStatus  _  OK  ^  l)j . 
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The  discrete  transitions  of  the  system  are: 

E  =  {[{qvq2)  (fc.tfi)  (?.»$.)  (m)  ]}• 


The  guard  conditions  are  given  as: 

jx  e  M1 :  [(x,  >  Command _ Time)  and  (GCS  _Command  =  1)]| 

G\  or  {Task  #_  Status  _  OK  =  0)  J 

(<72,<7| )  =>  {x  e  R1  :  (x,  >  Max _ Operation _ Time)  or  ( Schedule #_ Complete  =  1)} 
C  ~ '  (qi » #3 )  =>  6  ® 1  :  ( Ranged  _  Altitude  *  Reported  _  Altitude ) J 

(j  x  e  M 1  :  (Ranging _S tat  us  _  OK  =  1) 

G6  (#3><7i)  ^ '  an^  [(xi  <  Command _Time)a.nd(GCS  Command  =  0)]  • 

or  (Tas'A:  #_  Status  _  OK  =  1)] 


3.2  Mother-ship  (MS)  Function  Definitions  and  Model: 

1)  Generate  and  send  the  task  commands  to  control  Agents  in  a  group  to  implement  orbit  and 
attitude  change. 

2)  Receive  the  mission  command  from  GCS,  parse  the  command  for  the  task  parameters 
calculation  including  orbit  parameters  and  attitude  for  each  Agent. 

3)  Communicate  with  other  MSs  to  distribute  the  command  from  GCS. 

4)  Scheduling  the  task  for  each  Agent. 

5)  In  case  that  more  than  one  Agents  can  execute  the  assigned  task,  MS  will  use  the  Agent  which 
can  execute  at  the  earliest  time.  If  all  the  Agents  in  control  cannot  schedule  the  task,  MS  will 
send  message  to  other  MSs  so  that  other  MSs  can  resume  the  task,  at  the  same  time  MS  will  send 
a  mission  status  message  back  to  the  GCS. 

6)  MS  itself  can  perform  the  orbit  maneuver  and  attitude  change  and  execute  the  mission  like  an 
Agent. 
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xl<Operation_Timel 

or 


Figure  4.  State  Transition  Diagram  for  the  Mother-ships 

Figure  4  shows  the  state  transition  diagram  for  the  Mother-ship.  The  number  of  state  transition 
automata  nodes  equals  the  number  of  agents  plus  two  (r  =  N  +  2).  Q  =  {#,  q2  q3  q4  qr } ,  where 

•  qx :  Standby  Node.  In  this  node,  MS  will  monitor  the  command  from  GCS  and  from  Agents,  if 
GCS_Command=l,  the  system  will  go  to  q2,  the  task  scheduling  node.  The  system  will  jump  from  q2 
to  qx  when  the  system  receives  the  status  feedback  messages  from  all  Agents  and  the 

MS_Task#_Finish  tag  is  marked  to  one.  “#”  stands  for  the  number  of  commands  issued  by  the  MS.  If 
MS  receives  the  message  from  an  Agent  which  does  not  belongs  to  any  other  MS,  then  MS  will 
refresh  its  Agent  table  and  add  that  Agent  into  its  cluster.  Then  the  number  of  Agent  will  be 
N  =  N  + 1 ,  which  in  turn  changes  r  =  r  + 1 ,  and  a  new  node  qr  will  be  added  into  the  state  transition 
model.  Thus  the  system  becomes  scalable. 
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•  q2 :  MS  Task  Scheduling  Node.  In  this  node,  the  system  will  analyze  the  GCS  command  type, 

then  calculate  the  orbit  and  attitude  parameters  for  each  Agent,  it  also  calculates  the  task  start  and  end 
time  for  each  Agent.  At  this  point,  the  MS  send  the  status  report  to  the  GCS  notifying  it  whether  it  is 
possible  or  not  to  execute  the  command.  The  MS  also  sends  the  command  to  the  Agents.  After 
sending  the  command  to  the  Agents,  it  will  monitor  the  mission  status  feedbacks  from  the  Agents,  if 
one  or  more  Agents  send  back  the  mission  failure  messages  to  MS,  the  system  will  re-calculate  the 
mission  and  re-schedule  the  task  for  the  other  Agents.  When  the  system  receive  the  status  feedback 
messages  from  all  Agents,  then  the  system  will  send  the  mission  status  message  to  GCS  to  indicate 
success  or  failure.  Then  the  system  goes  back  to  q] . 

The  node  numbers  for  the  Agents  are  denoted  i  =  3,...,r.  This  number  depends  on  the  number  of 
agents,  N. 

•  qi :  Agent  (i  -  2)  Maneuver  Node:  From  q2  to  qt ,  the  system  sends  the  orbit  and  attitude 
command  to  Agent  (i  -  2)  at  the  calculated  task  start  time.  Then  the  system  will  standby  for  the 
mission  status  feedback  from  Agent  (i  -  2) .  After  the  system  receives  the  status  information  or  if  the 
time  period  exceeds  the  specification,  the  system  will  jump  from  qt  to  q2  with  a  tag 
Ag  (i  -  2)  _Task#_Finish  to  notify  the  status  of  the  task  for  Agent  (i  -  2)  . 

Note  that  q2  to  q3 ,  q4  ...  and  qr  does  not  occur  sequentially.  The  order  depends  on  the  command  type 
from  GCS  and  the  calculations  performed  in  q2 . 

The  finite  set  defined  for  the  Mother-ship  also  contains  only  one  continuous  variable  x,  =  t ,  which 
represents  the  system  time. 


v=N}. 

The  Domains  of  Q  =  [qx  q2  q3  qi  ■  ■  ■  qr }  are  given  as  follows, 

D(ql)  =  |x  e  R1  :  (GCS _Command  =  0)  or  (MS _Task#_ Finish  =  1)}, 
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fxeR1 


D(q2)  =  \ 


:  (x,  <  Ag  1  _  Command  _  Time )  or 
[(Ag\ _Task#_ Finish  =  1)  and  (x,  <  Ag2 _ Command __ Time)] 
a-  [(Xj  >  Ag  1  _  Operation  _  Time )  and  (x,  <  Ag 2  _  Command  _  Time)]  > , 
a  [{Ag2 _Task#_Finish  =  1)  and  (x,  <  Ag3 __ Command _ Time)] 
a  [(X[  >  Ag2  _  Operation  __  Time)  and  (X[  <  Ag3  _  Command  _  Time)] 


D(q,)  = 


(xeM1  :  [(x,  >  Agl _Command  _Time)  and  (x,  <  Agl _ Operation _ Time)]} 
{  and  (Ag  1  _  Task  #_  Fin  ish  =  0)  I 


D(q4)  = 


:  [(X[  >  Ag2 _Command  _Time)  and  (x,  <  Ag2 __ Operation  _ Time)]  j 
and  (Ag2  _  Task  #_  Finish  =0)  J 


D(qr)  = 


x  e . 


:  [(x,  >  AgN  _  Command  _  Time)  and  (x,  <  AgN  _  Operation  _  Time)]] 


and  (AgN  _  Task  #_  Finish  =  0) 


> . 


The  discrete  transitions  of  the  system  are: 

E  =  ^[qvq2)  (fc>?i)  {q2,q*)  {q3,q2 )  {q2>q*)  (q*>q2)  -  (q2>qr) 
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The  guard  conditions  are  given  as 


S7 

Ge 


{qvq2)  =>  jx  e  M1  :  (GCS _Command  =  1)| 


1* 

f 

Agl  _  Operation  _  Time, 

\ 

xel1  : 

x,  >  max  • 

Agl  ^Operation  _  Time, 

• 

k 

Agl  _  Operation  _  Time) 

/ 

(tf2>43) 

(ft.  ft ): 


( 


{q2-,q^ 

'  (Agl  _  Task  #_  Finish  =  1)  and 

or  (Agl  _  Task  #_  Finish  =  1)  and 
(Agl  _Task#_Finish  =  1) 

:  (x,  >  Agl  _  Command __  Time)} 

:  (x,  >  Agl  _  Operation  _  Time)  j 
or  (Agl  _Task#_Finish  - 1)  j 
(q2,q4)  =i>  | jc  e  R1  :  (x,  >  Agl  _ Command _  Time)} 

x  e  K1  :  (x,  >  Agl  _  Operation  _  Time)  ] 
or  (Agl _Task#_Finish  =  1)  j 


x  e  II 
x  e . 


(q2,qr)  =>  {x  e  R1 :  (x,  >  AgN _Command _Time)\ 

:  (x,  >  AgN  ^Operation  _Time)\ 
or  (AgN _Task#_Finish  =  1)  J 


x  e  j 


3.3  Agent  Function  Definition  and  Model: 

The  Agent  functions  are  as  follows. 

1)  Receive  orbit  and  attitude  commands  from  MS. 

2)  Perform  the  orbit  maneuver  and  attitude  change  for  the  scheduled  tasks. 

3)  Send  the  task  status  feedback  to  MS  to  notify  whether  the  task  is  successful. 

4)  Switch  to  MS  in  the  case  that  the  MS  malfunctions,  this  operation  is  done  autonomously  by  the 
Agents  in  that  group. 
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The  satellite  attitude  and  orbital  perturbations  are  modeled  as  follows.  As  for  the  attitude  model,  we 
use  the  deterministic  version  of  the  model  developed  in  [17].  The  satellite  attitude  model  for  the  Euler 
angle,  angular  velocity,  and  reaction  wheel  speed  vector  is  given  as, 


cosy/ 

-  cos  sin  \j/ 

sin  sin  t// 

"o' 

0=  1 

0 

COS0 

-sin^ 

(b  + 

n 

cos^ 

0 

sin  ^  cos  1// 

cos  j  cos  1// 

0 

Iga  =  -«x(/(ffl+ 1!  /*«)  -  +  Ithrust  +  V7 tS2 

fl  =  iJt_w  —  La  , 

where  the  superscript,  T ,  denotes  transpose,  It  is  the  total  moment  of  inertia  for  the  satellite  body,  Iw  is 
the  moment  of  inertial  matrix  for  the  wheels,  lg=It-  il  I WL  is  the  total  moment  of  inertia  minus  the 
moment  of  inertia  of  the  wheels,  L  is  the  wheel  orientation  matrix  ,  ©  =  [y,(9,y/]ris  the  roll,  pitch,  yaw 
Euler  angles,  a  is  the  angular  velocity  vector  in  body  fixed  coordinate  system,  Q  is  the  wheel  speed 


vector  is  the  absolute  torque  due  to  the  reaction  wheels,  T,hru„er  is  the  torque  due  to  the  thrusters,  n  is 
the  orbital  rate,  A*  represents  the  cross  product  matrix  of  a  vector  c-  . 


X 

cos  (//cos 6  siny/  -  cosy/ sin  6 

'*L 

y 

= 

-  cos  </  sin  y/  cos  6  +  sin  <fi  sin  9  cos^cosi//  cos  tj>  sin  y/  sin  9  +  sin  tj>  cos  9 

yL 

z 

BFC 

sin?isiny/cos(9  +  cos^sin(9  -sin^cosi//  -  sin  tf>  sin  1//  sin  9  +  cos  ifi  cos  6 

-ZL- 

LVLH 


-[Si  £2  £3] 


yL 

H 


\LVLH 


where  BFC  stands  for  body-fixed-coordinate  and  L  VLH  stands  for  local-vertical-local-horizontal 
coordinate  system.  In  LVLH  model,  x  is  the  direction  of  the  velocity  vector,  z  is  pointing  towards  the 
Earth,  and  y  completes  the  triad.  The  above  model  is  linearized  and  utilized  as  the  attitude  dynamics 


model  [16].  We  note  that  we  are  ignoring  the  magnetic  and  the  aerodynamic  torques. 

As  for  the  orbital  perturbation  model,  we  incorporate  atmospheric  drag  and  Earth  oblateness  (J2) 
effects  only.  We  assume  other  effects  are  negligible.  The  following  orbit  decay  rate  due  to  the 
atmospheric  drag  is  used.  This  drag  force  will  affect  the  velocity  in  -x  direction  only. 
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V 

r1 

Fdrag=-2K(CAAlm)p- 

where  p  is  the  atmospheric  density  at  a  particular  point  in  the  solar  cycle,  Cd  is  the  satellite  ballistic 
coefficient,  A  is  the  satellite  cross-sectional  area,  m  is  the  satellite  mass,  r  is  the  Earth  radius  plus 
altitude,  and  P  is  the  orbital  period. 

Earth  oblateness  will  be  the  other  perturbing  effect  that  will  be  included  in  the  orbit  model.  This 
perturbing  force  due  to  J2  on  orbit  altitude  can  be  represented  as, 

Fx  =  -[(sin2  /')(sin  2k)] 

3  r  •  .  •  i 

F.,  = - ,  sin/cosisirm 

>  2  /  1  J 

Fz  =  .  1-— (sin2 /)(l-cos2w) 

where  u  is  the  argument  of  latitude  (the  sum  of  true  anomaly  v  and  argument  of  perigee  p ),  J2  is 
taken  as  0.00108263,  i  is  the  inclination  of  the  orbit,  p  is  the  gravitational  parameter  of  the  Earth,  re  is 
the  equatorial  radius  of  the  Earth,  and  r  is  the  Earth  radius  plus  the  altitude,  h  ,  of  the  satellite.  The  total 
altitude  decay  rate,  F ,  for  the  satellite  is  the  sum  of  the  above  four  equations.  To  simplify  the  orbital 
maneuver,  the  Hohmann  transfer  orbital  maneuver  will  be  used  to  control  the  orbit. 

For  the  modeling  of  the  discrete  part  of  the  Agent,  we  apply  the  hybrid  automation,  the  set  of  discrete 
nodes  can  be  defined  into  set  Q  =  {q\  qi  q-b  q 4  qs} ,  which  represents  the  following  Agent 
satellite  nodes: 
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Figure.  5.  State  transition  diagram  for  the  general  satellite  control  system. 


•  q,  :  Initial  Node.  In  this  node,  the  satellite  is  at  the  initial  orbit  with  its  initial  altitude,  initial 
attitude  and  initial  inclination.  The  satellite  will  check  the  status  of  Orbit-Attitude  Command  to 
see  if  there  is  a  requirement  to  do  the  orbit  and  inclination  change.  If  Orbit-Attitude  Command  is 
true,  the  satellite  will  jump  to  the  q2  and  determine  whether  an  orbit  maneuver  is  necessary  or  not. 

•  q2 :  Orbit  Maneuver  Node.  In  this  node  the  satellite  changes  its  altitude  to  the  target  altitude 
determined  by  the  input  condition.  It  will  check  the  current  altitude  with  the  target  altitude,  when 
there  is  a  difference  between  the  current  and  the  target,  then  it  will  check  the  current  attitude  to 
see  whether  the  satellite  is  in  the  thruster  firing  mode,  if  not,  it  will  jump  into  q3  to  change  its 
attitude  to  the  thruster  firing  mode  to  boost  the  satellite  to  the  target  altitude.  If  the  satellite  is 
already  in  the  thruster  firing  mode,  satellite  will  perform  a  thruster  fire  to  shoot  the  satellite  to  the 
target  orbit.  If  there  is  no  need  to  change  the  altitude  (the  Orbit-Attitude  Command  only  includes 
an  attitude  change),  the  satellite  will  jump  to  q3  to  calculate  the  Euler  angles  change  to  reach 
target  attitude  directly.  This  node  is  triggered  by  Or  bit- Attitude  Command  from  q3  or  from  q4,  the 
Attitude  Adjustment  Node 

•  q3 :  Attitude  Calculation  Node.  In  this  node,  the  satellite  calculates  and  outputs  the  different  Euler 
angles,  which  are  needed  by  q4  to  implement  the  attitude  change,  according  to  the  input 
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conditions.  For  example,  if  the  satellite  goes  from  q2  to  cj3  to  implement  an  target  attitude 
adjustment,  q3  node  will  calculate  the  roll,  pitch  and  yaw  angles  used  in  q4  node  to  adjust  the 
attitude  to  the  target;  if  the  satellite  carries  out  orbit  and  inclination  change  due  to  the  Orbit- 
Attitude  Command,  q3  node  will  calculate  the  corresponding  roll,  pitch  and  yaw  angles  for  the 
thruster  firing  and  inclination  change. 

•  q4 :  Attitude  Adjustment  Node.  In  this  node,  the  satellite  adjusts  its  attitude  to  the  input  Euler 

angles  calculated  by  Attitude  Calculation  Node  for  the  satellite  orbit  and  attitude  change.  When 
the  current  attitude  reaches  to  the  calculated  attitude  from  q3,  it  will  then  check  the  current 
altitude  with  the  target  altitude,  if  the  current  altitude  does  not  match 

the  target,  the  satellite  will  jump  to  q2  node  again  to  implement  the  orbit  maneuver  otherwise  it 
will  jump  into  q5  satellite  operation  node. 

•  q3 :  Satellite  Operation  Node.  In  this  node  the  satellite  operates  at  the  final  orbit  with  a  target 
attitude  of  roll,  pitch,  and  yaw  angles.  The  satellite  will  check  the  current  attitude  and  the  current 
altitude,  if  the  altitude  of  satellite  drops  below  the  target  altitude  or  the  current  attitude  is  different 
from  the  target  attitude,  it  will  jump  to  the  q2  node  and  the  orbit  maintenance  procedure  will  take 
in  effect  to  maintain  the  orbit  and  the  attitude  of  the  satellite. 

The  finite  set  of  real  valued  continuous  variables  for  the  LQR  case  is  defined  as, 

X  =  {xux1,x2,x4,x5,x6,x1,xi,x9,xw,xn) ,  where  xl  represents  the  altitude  (h)  of  the  satellite,  x2  represents 

angular  velocity  cox ,  x3  represents  the  angular  velocity  5coy ,  x4  represents  the  angular  velocity  coz ,  x5 
represents  the  roll  Euler  angle  <j> ,  x6  is  the  pitch  Euler  angle  9 ,  x2  is  the  yaw  Euler  angle  i// ,  and  xs  to 
xn  represent  the  angular  velocities  of  the  four  reaction  wheels.  The  continuous  dynamics  are  specified  as 


r  iT 

f{qx,x)  =  \j  cox  8coy  co z  tp  0  y/  Q3  fi4J 


fid 2’x)  = 


a(  1  ~  g  ) 
1  +  e  cos  v 


0000000000 


The  deterministic  version  of  the  satellite  with  reaction  wheels  can  be  modeled  as  follows. 
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0  0  n 
0  0  0 
,  where  A=  0  0  » 
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1  0  0 
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We  can  then  calculate  the  continuous  dynamics  of  q4  as 


h-Fx&t 

\  U  x  9.2334e-7+©z  x  2.8937e4+0,  x  2.1753e-8+n2  x  2.1753e-8+fi3  x  2.1753e-8+fi4  x  2.1753e-8)  dt 

]  (-6  x  2.2257e-6)  dt 

x  8.3747e-4-n,  x  3.0565e-8+n2  x  3.0565e-8+fi3  x  3.0565e-8-n4  x  3.0565e-8^ 

1  (y/  x  1 .0636e-3+ox  )  dt 

/(«4,x)  = 

J  (-yi  x  1 ,0636e-3+oz  )  t/r 

J  (-^  x  5.33O9e-7+0  x  1.285e-6+a>x  x  4.8352 e-4-a>z  x  1.6707e4+fi,  x  5.0877e-9-n2  x  3.0205e-8-n3  x  3.0205e-8+n4  x  5.0877e-S 
I  (y)  x  5.33O9e-7+0  x  1.285e-6+ox  x  4.8352e4+<yz  x  1.6707e4+n,  x  3.0205e-8-n2  x  5.0877e-9-n3  x  5.0877e-9+n4  x  3.0205e-8 
I  (ft  X  5.3309e-7-#  x  I.285e-6+®x  x  4.8352e4+fi>z  x  1.6707e4+i2,  x  3.0205e-8-Q2  x  5.0877e-9-fl3  x  5.0877e-9+fi4  x  3.0205e-8 
J  (-j t  x  5.33O9e-7-0  x  1.285e-6+®x  x  4.8352e4-fflz  x  1.6707e4+n,  x  5.0877e-9-fi2  *  3.0205e-8-n3  x  3.0205e-8+fi4  x  5.0877e-9 


T 

f(<l5’x)  =  \y  °>X  8coy  az  <j)  6  v  q.2  q3  fi4]  • 

There  is  no  continuous  dynamics  in  state  q3  because  that  q3  is  the  static  node,  in  this  node  the  Euler 
angles  are  calculated  and  outputted  directly  according  to  the  input  conditions. 

The  domains — where  the  continuous  dynamics  are  valid — are  given  as 


D(q,)= 


x  e  R11  :  (Orbit_Attitude_Command  =  0) 

and(-v5  =  TargetRoll,  x6  =  TargetPitch,x7  =  TargetYaw) 


jx  e  R11 :  (xj  <  Target  Altitude)  or  (Orbit_Attitude_Command  =  1)J , 


Because  that  r/jhas  no  continuous  dynamics  so  that  the  domain  of  q3  can  be  presented  as: 
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D(q3)=  jx  e  Kn,  EulerOutput=oj , 

D(q4)=  jx  e  R11  :  (x5  *  CalculatedRoll,x6  *  Ca1culatedPitch,x7  ^  CalculatedYaw)J , 
D(q5)=  jx  e  R11  :  (x,  >  Target  Altitude)  J  . 

Initial  conditions  enforced  on  the  system  are: 


x  e  R11  :  (x(  =  init  altitude)  a(x2  =  0°/s,x3  =  0°/s,x4  =  0°/s) 
a(x5  =  0°,x6  =  0°,x7  =  0°)  a(x8  =  0°,x9  =  0°,x,o  =  0°,x 
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The  discrete  transitions  in  the  system  are: 

E  =  {[(<h’<h)  (92.9s)  (93-94)  (94-92)  (94.9s)  (95.92)]}- 
The  guard  conditions  are  defined  as 


<h 

C2 

Gi 

g4 

^5 

G6 


(9j.92)  = 
(92.93 ): 


:  (Qbit_Attitude_CbnTTi^ 


->) 


>  I  x  e  R1 1 :  (xj  >  Target_Altitude)or  I 

|(xj  ^TargetRdljXg  ^TargetPitchx-y  ?*TargetYaw)J 


(93. 94)  =>{EuIerOjtput  =  l} 


(94.92 ) : 
(94.95)  = 

(95.92)  = 


1 :  [(xj  =ChlculatedRoll,xg  =CalculatedPitch,X'y  =ChlculatedYaw)]  I 


and  (xj  <Target_Altitude) 


1 


>  I  x  eR1 1 :  [(xj  =  GalculatedRoll.xg  =  ChlculatedPitchx-y  =  GalculaledYaw)  I 
[  and  (xj  >  Targgt_Altitude)]  j 

J  x  e  R1 1 :  [(X5  =  TargetRoll,  xg  =  TargstPitch,  X7 = TarggtYaw)  I 
[  and  (xj  <  Target_Altitude)] 


The  reachability  of  each  node  in  this  case,  is  represented  as 
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ReachH  =  {q] }  x  {x  e  R" } 

Ulg’jJxjjc  e  R11  :  (Orbit_Attitude_Command  =  1)  or  (x,  <  TargetAltitude)} 


U{tf3}x{xe  R11} 

(Orbit_Attitude_Command  =  1) 

and  (x5  CalculatedRoll,x6  *  CalculatedPitch,x7  ^  Calculated  Yaw) 
or  [(x,  <  Target  Altitude)  a  (jc5  *  CalculatedRoll,x6  &  CalculatedPitch,x7  ^  CalculatedYaw)] 


U  {<?4  }  X 


Ufejx 


(xe  R":  (x,  >  TargetAltitude)  a  [(x5  =  TargetRoll,x6  =  TargetPitch,x7  =TargetYaw)] 
[  and  (Current_Inclination=TargetInclination) 


The  OutH  is: 

OutH  =  [qx }  x  | x  e  R1 1  :Orbit_Attitude_Command  =  l| 

U{<72}x{jteR"  :  (x,  >  Target  Altitude)  or  (Orbit_Attitude_Command  =  0)j 
U{<73}xjxe  R":EulerOutput  =  lj 

U{<?4}xjxe  R"  :(x5  =  CalculatedRoll,x6  =  CalculatedPitch,x7  =  CalculatedYaw )j 
U{<75}xjx£  R"  :(x,  <  TargetAltitude)}. 

The  equations  show  that  quq2,q},qA  and  qs  can  all  be  reached  from  the  initial  condition  within  a  finite 

execution  (r,q)  e  £'„  with  (r)  =  N  <  oo  and  q(rN ')  =  q , . 

For  Non-Blocking  property,  we  examine  ( q,x )  e  ReachH  fl  Outn  ,  where 

Reach H  f]OutH  =  {<7,}x{x  e  R":Orbit_Attitude_Command=l} 

U{^}x{xeRu  : (x,  =  TargetAltitude)} 

U{?3}x{xe  R":EulerOutput=l} 

U  {<74 }  x  {x  e  M"  :  (Orbit_Attitude_Command=l)  or  (x,  <  TargetAltitude)} 
U{<75}x{xe  R"  :(x,  =  TargetAltitude)}. 

From  the  above  result,  we  note  that  for  all  ( q,x )  e  Reach H  r\OutH  ,  there  exists  ( q,q ')  e  E  such  that 
x  e  G(q,  q ') .  This  shows  that  the  hybrid  automaton  is  non-blocking. 

For  the  deterministic  property,  we  study  the  expression  of  ReachH  again,  where  we  can  find  that  from 
the  initial  condition,  (g,,x),  the  only  transition  that  can  occur  is  (quq2)  when  (q,x)  e  OutH  ;  for  (q2,x),  the 
transitions  that  can  occur  are  (q2,q3)  when  x,  >  TargetAltitude ,  when (q, x)  e  OutH  ;  and  for  (V/3, x) ,  the 
transition  (q2,qA)  will  occur  when  EulerOutput  equals  to  1;  for  (c/4,x),  the  possible  transitions  are 
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(q4,q2)  and  (qA,qs),  however,  G(q4,q2)f)G(qA,qs)  =  0 ,  thus  for  all  (q,x)e  Reach H  ,  x  <£  G(q4,q2)r\G(q4,q5) ; 
when  the  node  is  in  ( q5,x ),  the  only  transition  that  can  occur  is  (q4,g5) ,  when  (q,x)  e  OutH  .  Therefore,  the 
conditions  of  Lemma  II  are  satisfied.  The  result  verifies  that  the  hybrid  automata  of  general  control  case 
are  deterministic.  According  to  Theorem  I,  we  conclude  that  the  hybrid  automaton  accepts  a  unique 
infinite  execution. 

4.  Simulations 

In  this  section,  we  illustrate  this  hierarchical  hybrid  system  architecture  by  simulating  the  mission  of  a 
remote  sensing  satellite  network.  In  this  scenario,  there  is  a  Ground  Control  Station  located  at  latitude 
40.0  N  and  longitude  75.6  W,  near  the  city  of  Philadelphia.  The  scenario  also  includes  six  LEO  satellites 
which  are  grouped  into  two  clusters.  Each  cluster  consists  of  one  Mother-ship  and  two  Agents,  satellites 
within  a  cluster  are  in  the  same  orbit  but  with  different  argument  of  Perigees.  Two  orbits,  orbit  A  and 
orbit  B  are  of  the  same  altitude,  which  is  set  as  680km.  The  inclination  of  orbit  A  is  28  degrees  and  the 
inclination  of  orbit  B  is  58  degrees.  The  model  of  the  LEO  satellite  used  in  this  scenario  is  the  Korea 
Multipurpose  Satellite  (Kompsat),  which  is  a  LEO  remote  sensing  satellite.  The  attitude  parameters 
associated  with  this  satellite  are  given  in  [17]. 

The  mission  of  this  scenario  is  to  control  these  two  clusters  of  satellites  to  take  images  of  a  certain  area. 
To  take  the  images,  the  satellite  switches  its  attitude  from  satellite  flying  mode  to  image  taking  mode. 
Figure  6  shows  the  difference  between  satellite  flying  mode  and  image  taking  mode.  In  the  satellite  flying 
mode,  the  yaw,  pitch  and  roll  angles  of  the  satellite  are  0,  0,  0  degrees  respectively,  in  the  imaging  mode, 
the  attitude  of  the  satellite  becomes  0,  90,  0  degrees. 
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Figure  6.  Left:  Satellite  Flying  Mode,  Right:  Image  Taking  Mode. 


In  the  first  simulation,  the  mission  begins  with  the  command  sent  by  the  Ground  Control  Station.  The 
command  is  to  take  images  over  the  area  with  latitude  22.5  N  and  longitude  41.8  W.  The  command  is  sent 
to  Mother-ship  B  on  orbit  B,  which  is  visible  from  the  Ground  Control  Station.  Then  the  command  is 
relayed  to  the  Mother-ship  A  via  the  link  between  the  two  Mother-ships.  After  Mother-ship  receives  the 
command,  it  analyzes  the  command  and  decomposes  the  mission  into  different  tasks  for  the  Agents  in  the 
cluster.  Then  it  calculates  the  orbit  parameters  and  schedules  the  tasks  for  each  Agent.  The  Mother-ships 
generate  these  coordination  commands  so  as  to  control  the  Agents  to  take  images  of  the  target  area. 
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Figure  7.  The  initial  deployment  of  the  satellites  network 

As  we  observe  in  the  simulation,  satellites  in  orbit  B  pass  through  the  target  area  before  satellites  in 
orbit  A,  and  Mother-ship  B  controls  Agent  B2  to  switch  from  satellite  flying  mode  to  image  taking  mode 
at  the  simulation  time  683  seconds  which  translates  into  about  six  hours  fifty  minutes  from  the  begging  of 
the  mission.  Agent  B2  returns  back  to  thruster  firing  mode  at  783  seconds.  Then,  Mother-ship  B  controls 
Agent  B1  to  take  images  from  simulation  time  871  seconds  to  971  seconds.  At  the  second  stage,  in  order 
to  obtain  the  better  image  quality,  Mother-ship  A  on  orbit  A  controls  Agent  A2  and  Agent  A1  to  transfer 
into  the  lower  orbit  with  the  altitude  of  500km  before  switching  to  the  image  mode.  After  performing  the 
image  taking  tasks,  Agent  A1  and  Agent  A2  will  go  back  to  their  original  orbit  with  an  altitude  of  680km. 
Agent  A2  goes  into  the  target  area  at  simulation  time  2290  seconds,  which  means  that  the  Agent  A2  goes 
to  the  target  area  after  twenty  two  hours  fifty  six  minutes  after  the  mission  beginning.  Therefore,  Mother- 
ship  A  controls  Agent  A2  to  take  images  from  2290  seconds  to  2390  seconds.  And  Agent  A1  takes 
images  from  2487  seconds  to  2587  seconds.  The  upper  graph  of  Figure  8  shows  the  attitude  change  of 
each  satellite  in  the  simulation.  We  notice  that  Agent  B2  first  changes  its  attitude  from  0,  0,  0,  degrees  of 
yaw,  pitch,  and  roll  angles  to  0,  90,  0  degrees  to  switch  to  the  image  taking  mode.  Then,  Agent  Bl,  Agent 
A2,  and  Agent  A1  switch  to  the  image  taking  mode  in  file.  The  lower  graph  of  Figure  8  gives  the  orbit 
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change  of  satellites  in  cluster  A.  From  the  graph  we  can  see  that  Agent  A1  and  Agent  A2  change  their 
orbit  before  taking  images,  and  go  back  to  the  higher  orbit  when  the  tasks  are  finished. 
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Figure  8.  Attitude  and  orbit  change  of  controlling  four  satellites  in  two  clusters 

From  the  simulation  results,  we  notice  that  the  Mother-ship  acts  as  the  coordinator,  which  receives  the 
command  from  the  Ground  Control  Station,  and  generates  the  coordination  information  for  the  Agents.  It 
takes  over  some  control  functions  from  Ground  Control  Station  and  is  able  to  control  all  Agents  in  the 
cluster  even  if  they  are  invisible  from  the  Ground  Control  Station.  The  simulation  shows  our  hierarchical 
system  architecture  is  effective  for  the  multiple  satellite  control. 


The  second  simulation  is  to  demonstrate  the  robustness  and  intelligence  of  the  system.  The  command 
is  the  same  as  the  previous  simulation.  However,  we  assume  this  time  Agent  B2  fails  in  executing  the 
image  taking  task,  then,  Mother-ship  B  will  reschedule  the  tasks  to  the  rest  Agents.  In  cluster  B,  there  is 
only  Agent  B1  left,  and  Agent  B1  has  been  scheduled  to  take  images  from  simulation  time  871  seconds  to 
971  seconds,  therefore,  Mother-ship  B  itself  will  switch  into  image  taking  mode  and  perform  the  image 
taking  task  when  it  passes  through  the  target  area.  Then,  we  assume  the  Mother-ship  A  malfunctions.  In 
this  case,  Agents  in  cluster  A  will  elect  a  new  Mother-ship  to  take  over  the  control  over  the  cluster  A. 
Here  we  assume  Agent  A1  becomes  the  new  Mother-ship,  it  communicates  with  Mother-ship  B  to  notify 
this  change.  Then,  it  will  control  Agent  A1  and  itself  to  take  images  for  the  target  area.  Figure  9  shows 
the  mode  switching  of  Mother-ship  B,  Agent  Bl,  Agent  A2,  and  Agent  Al. 
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Figure  9.  Mission  rescheduling  and  fault  handling  of  the  system 

The  simulations  we  have  done  are  simple  examples  to  demonstrate  that  using  the  hierarchical  hybrid 
architecture  to  control  the  operation  of  multiple  satellites  is  feasible.  We  can  extend  the  model  to  the  more 
complex  scenarios,  where  there  are  more  Mother-ships  and  Agents  participating  in  the  mission,  and  the 
control  of  the  satellites  will  include  attitude,  orbit  and  inclination  maneuver.  The  functions  of  Mother-ship 
and  the  Agents  can  also  be  altered  to  meet  the  different  mission  requirements.  These  researches  are  left  as 
the  future  works. 

5.  Conclusions 

In  this  report,  we  introduced  a  three  tier  hierarchical  hybrid  architecture  to  control  the  multiple  remote 
sensing  satellite  system.  The  three  tiers  consist  of  the  Ground  Control  Station,  Mother-ship,  and  Agent. 
This  hierarchical  architecture  lessens  the  control  and  communication  burden  of  the  ground  control  station, 
and  improves  the  effectiveness  and  robustness  of  the  system. 

Because  the  control  scheme  of  the  system  includes  both  discrete  and  continuous  dynamics,  we  applied 
hybrid  automata  theory  to  the  orbit  and  attitude  control  of  the  agents,  and  discrete  event  system  theory  to 
control  the  ground  control  station  and  the  Mother-ships.  We  established  the  mathematical  model  for  each 
tier  to  describe  this  hierarchical  hybrid  system  and  investigated  the  interrelationship  among  different  tiers. 
We  showed  that  by  using  hierarchical  hybrid  architecture,  we  can  implement  an  autonomous,  intelligent 
control  system  for  the  multiple  remote  sensing  satellite  system. 

We  simulated  this  hierarchical  hybrid  system  with  Matlab,  Simulink  and  Stateflow.  Through  the 
simulations,  we  demonstrated  that  a  group  of  remote  sensing  satellites  can  be  cooperatively  controlled  by 
applying  hierarchical  hybrid  system  architecture  onto  the  satellites.  The  simulation  results  also  illustrate 
the  effectiveness  and  the  robustness  of  the  system. 
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